TROUBLESHOOTING IPKUNGFU

 First, did you read the README?
 Did you check your configuration files in /etc/ipkungfu/ ?
 Did you re-run ipkungfu after changing a configuration file?
 
 Some common problems people have had are covered here:

 "When I run ipkungfu I get 'ipkungfu: command not found'" - first,
 make sure you have installed ipkungfu by running the installer (just
 type ./install in the unpacked ipkungfu directory.  If you have done
 this, ipkungfu is probably not in your PATH. ipkungfu is installed to 
 /usr/local/sbin.  You can type /usr/local/sbin/ipkungfu instead, or 
 add /usr/local/sbin to your $PATH environment variable:
 	export PATH=$PATH:/usr/local/sbin

 "I get an ERROR: Root check FAILED" - This one is quite simple, you must
 be root to install, configure and run ipkungfu. Log in as root or
 su to root.

 "I ran the installer, but the firewall did not come up" - Installing
 ipkungfu and running ipkungfu are two different things. You should run the
 ipkungfu script located in the /usr/local/sbin directory after editing
 /etc/ipkungfu/ipkungfu.conf and any other configuration files you want to
 customize.

 "I changed a configuration file, but nothing changed" - The likely answer is
 that you did not re-run ipkungfu. ipkungfu builds the rules for
 the firewall based on the configuration files. Once rules are created, the
 contents of the configuration files are irrelevant unless you run ipkungfu
 again.

 "How can I get ipkungfu to start at boot?" - Most Linux distributions make
 it possible to run sysV (System 5) init scripts.  If so, you have a script
 called ipkungfu in /etc/init.d or /etc/rc.d/init.d that you can add to
 your startup configuration.  If your distribution is chkconfig-compatible
 like Redhat or Mandrake, the ipkungfu install script does this for you.  If 
 this doesn't work for you, add the following line to an existing init script, 
 such as rc.local or ifup-post:
 
 /usr/local/sbin/ipkungfu --init

 "How can I check to see if my firewall is running?" - As root, type:

 	ipkungfu -c 
	or
	ipkungfu --check

 "I'm trying to run a game server, but people can't connect" - First make sure
 you have allowed connections to the correct port(s). Check the configuration
 in /etc/ipkungfu/ipkungfu.conf and re run ipkungfu if changes are made. If it
 is correct, or still does not work, edit /etc/ipkungfu/advanced.conf and set
 LOOSE_UDP_PATCH to 1.

 "I can't play Microsoft games through my firewall" - Don't worry, it's not
 ipkungfu's fault!  Many newer Microsoft applications, including games, use
 Universal Plug N Play technology, and Linux isn't very good at doing the
 right things with that traffic.  But all is not lost!  There is a product
 called linux-igd, a UPnP gateway for linux, available which makes these 
 things possible.  Check out http://sourceforge.net/projects/linux-igd for
 details.  I have reports that this also makes it possible to transfer files
 using MSN Messenger using this product.

 "I can't send files via dcc in IRC!" - Because some systems take care of this
 automatically, and some don't support it at all, I have left out the code to
 take care of this for you.  You must have ip_conntrack and ip_conntrack_irc
 either inserted into the running kernel as modules, or compiled into the
 kernel itself.  Most likely you one or both of them compiled as modules but
 not inserted. To rectify this situation, run these commands:

 	modprobe ip_conntrack_irc
 	echo "ip_conntrack_irc" >> /etc/modules

 If this machine is a gateway for the machine in question, repeat the
 above steps, replacing ip_conntrack_irc with ip_nat_irc.   You may need 
 to reboot for this to take effect.  (I'm sure there's a less drastic way 
 to put this into effect.  If you know what it is, please let me know! 
 (grasshopper@linuxkungfu.org)

 "Will IPKungFu work with ipchains?" - Let me put it this way:  No. ipkungfu 
 only works on Linux kernels 2.4 and higher that have iptables support.

 "How can I temporarily turn off the firewall or stop all access?" - Although
 disabling the firewall when you are connected to an external network such as
 the Internet is not recommended, if it is necessary, then you have 2 options.
 Disable the firewall so all access is allowed (not recommended) or shut off
 all access, internal and external (panic mode)

 	For panic mode:
	 ipkungfu --panic

	To just disable:
	 ipkungfu -d
	or
	 ipkungfu --disable

  To turn the firewall back on, simply rerun the ipkungfu script:

  	ipkungfu

 There is no need to turn off the firewall to make a change to a
 configuration file, but the script must be rerun for changes to take effect.

 "Where is the firewall log located?" - Many systems use /var/log/syslog to
 log kernel messages. Since packets are filtered at the kernel level, this is
 where they are most likely located, along with other kernel messages.  All
 ipkungfu log entries contain the string "IPKF", so you can, for example:

 grep IPKF /var/log/syslog

 to see recent firewall logs, unless you have selected ulog as your logging
 facility in log.conf, in which case the location of your log will depend on
 your configuration of the ulogd utility.
